Install ca certificate into Web browser.
将ca证书安装到Web浏览器。
The best practice is to use the ca certificate.
最佳实践是使用ca证书。
Sign the certificate using the ca certificate you created in the first step.
使用在第一个步骤中创建的ca证书对这个证书进行签署。
It's much easier to distribute just one ca certificate that signs many certificates.
只分发一个签署了许多证书的ca证书容易得多。
Team Explorer will not connect to a server that does not have a valid ca certificate.
团队资源管理器不会连接到没有有效ca证书的服务器。
Listing 10: Retrieve the ca certificate from the file system and extract the public key.
清单10：从文件系统中检索ca证书并提取公共密匙。
Adjust the user's.ftpcnf file to point to the ca certificate by only changing this one line.
在用户的.ftpcnf文件中修改以下行，从而指向ca证书。
The CA certificate has expired and the certificate must be re-issued with an unexpired date.
CA证书已过期，必须重新发布未过期的证书。
Select Download ca's certificate (see Figure 7) to display a page with the ca certificate details.
选择Downloadca ' sCertificate(请参见图7)以显示ca证书详细信息页。
The ca certificate is not from a trusted authority, is not installed correctly, or is missing.
ca证书不是来自受信任的颁发机构，证书安装不正确或证书不存在。
This error indicates there is a problem with the ca certificate on the application-tier server.
此错误指示应用层服务器上存在与ca证书有关的问题。
To publish the ca's certificate, access the ca portlet and select publish ca certificate (Figure 5).
要发布ca的证书，请访问caPortlet并选择Publish ca Certificate(图5)。
The first in this array is the certificate of the client itself; the last is normally the ca certificate.
数组中的第一个是客户机本身的证书；最后一个通常是ca证书。
If you do become your own ca, work with your software vendor to determine methods to protect the ca certificate.
如果您确实要做自己的CA，就和您的软件供应商商议决定保护ca证书的方法。
In case of a ca signed certificate, the ca certificate of the ca which signed the server certificate is required.
对于CA签署的证书，需要签署服务器证书的CA的ca证书。
You can use iKeyman to create a new self-signed certificate as we've just shown, or add a CA certificate to your own truststore.
您可以使用iKeyman 来创建新的自签名证书，如我们刚才所示，或是向您的信任库中添加CA 证书。
Since the client trusts any certificate it has (which in this case includes the ca certificate), it trusts certificates that the ca has signed.
由于客户端信任它拥有的任何证书(在本例中包含ca证书)，所以它信任CA签署的证书。
All certificates issued by a ca are digitally signed by the ca, and can be verified using the ca certificate (which contains the ca's public key).
CA签发的所有证书都是由ca数字签署的，可以使用ca证书(它包含CA的公钥)对其进行验证。
You would then have to import your own ca certificate into these browsers (or other clients), but the overall testing would be more realistic.
然后，您必须将自己的CA证书导入这些浏览器(或其他客户端)，但整体测试将更加现实。
To create the certificate database, either the ca certificate which signed the LDAP server's certificate or the server's certificate is required.
为了创建证书数据库，需要对LDAP服务器证书进行签名的ca证书或服务器的证书。
The best practice in this scenario is to base the trust off the Novell ca certificate which can be exported as mentioned in Section 3.2.2 Step 6.
这个场景中的最佳实践是根据Novell ca证书建立信任(可以按3.2.2节中的第6步导出Novellca证书)。
Since the client trusts any signing certificate it has (which in this case includes the ca certificate), it trusts certificates that the ca has signed.
由于客户机信任它拥有的任何证书(在本例中包括ca证书)，所以它信任CA签署的证书。
And if the ca certificate (s) fall into the wrong hands, outsiders can create certificates that can impersonate a valid member of your organization.
一旦ca证书落到不正当的人手中，外部的人就可以创建证书伪装成您公司的一个合法成员。
For certificate provide the absolute path to the file containing the ca certificate (or the server certificate in case you use self-signed certificate).
对于certificate，提供包含ca证书(如果使用自签署证书，是服务器证书)的文件的绝对路径。
Because the value TrustStore is set in the Certificates column of the bindings, shown in Figure 17, the certificate in the message is checked against the ca certificate.
由于在绑定的certificates列中设置了值TrustStore，如图17所示，因此将根据ca证书来检查消息中的证书。
Also, in some environments, you can request a ca to generate a ca certificate for a self-signed certificate, which validates and resigns the previously generated certificate.
而且，在某些环境中，您可以请求CA为自签署的证书生成一张ca证书，这就确认并再签署了以前生成的证书。
To establish trust, the ca certificate which signed the LDAP server certificate or the server certificate itself (in case it's self signed) must be imported into the tm1store.
为了建立信任，必须把签署LDAP服务器证书的ca证书或服务器证书本身(对于自签署证书)导入tm 1store中。
Because this root ca certificate is located in your Trusted root Certification Authorities store, this computer will now trust any certificates issued by your AD CS server.
因为此根ca证书的位置在受信任的根证书颁发机构存储中，此计算机现在将信任由ADCS服务器颁发的所有证书。
The example uses a lazy initialization approach and caches a reference to the Public Key from the CA Certificate to avoid the need to reload it each time the handler is invoked.
该实例使用滞后初始化的方案并缓存CA证书中的公共密匙的引用来避免每次处理程序调用时都要重新加载它。
You would recognize a self signed certificate by the fact that subject and issuer fields contain the same string while there is no certificate attribute set indicating this is a ca certificate.
自签署证书的特征是，主题和颁发者字段包含相同的字符串，而且没有设置表示这是ca证书的证书属性。
应用推荐